config ftp-proxy explicit
Configure explicit FTP proxy settings.
config ftp-proxy explicit
Description: Configure explicit FTP proxy settings.
set status [enable|disable]
set incoming-port {user}
set incoming-ip {ipv4-address-any}
set outgoing-ip {ipv4-address-any}
set sec-default-action [accept|deny]
set server-data-mode [client|passive]
set active-src-port [default|server]
set ipv6-status [enable|disable]
set incoming-ip6 {ipv6-address}
set ssl [enable|disable]
set ssl-cert <name1>, <name2>, ...
set ssl-dh-bits [768|1024|...]
set ssl-algorithm [high|medium|...]
end
config ftp-proxy explicit
|
Parameter |
Description |
Type |
Size |
Default |
||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
status |
Enable/disable the explicit FTP proxy. |
option |
- |
disable |
||||||||||
|
|
|
|||||||||||||
|
incoming-port |
Accept incoming FTP requests on one or more ports. |
user |
Not Specified |
|
||||||||||
|
incoming-ip |
Accept incoming FTP requests from this IP address. An interface must have this IP address. |
ipv4-address-any |
Not Specified |
0.0.0.0 |
||||||||||
|
outgoing-ip |
Outgoing FTP requests will leave from this IP address. An interface must have this IP address. |
ipv4-address-any |
Not Specified |
|
||||||||||
|
sec-default-action |
Accept or deny explicit FTP proxy sessions when no FTP proxy firewall policy exists. |
option |
- |
deny |
||||||||||
|
|
|
|||||||||||||
|
server-data-mode |
Determine mode of data session on FTP server side. |
option |
- |
client |
||||||||||
|
|
|
|||||||||||||
|
active-src-port |
Determine port for data session to connect FTP client in active mode. |
option |
- |
default |
||||||||||
|
|
|
|||||||||||||
|
ipv6-status |
Enable/disable allowing an IPv6 ftp proxy destination in policies and all IPv6 related entries in this command. |
option |
- |
disable |
||||||||||
|
|
|
|||||||||||||
|
incoming-ip6 |
Restrict the explicit ftp proxy to only accept sessions from this IPv6 address. An interface must have this IPv6 address. |
ipv6-address |
Not Specified |
:: |
||||||||||
|
ssl |
Enable/disable the explicit FTPS proxy. |
option |
- |
disable |
||||||||||
|
|
|
|||||||||||||
|
ssl-cert |
List of certificate names to use for SSL connections to this server. Certificate list. |
string |
Maximum length: 79 |
|
||||||||||
|
ssl-dh-bits |
Bit-size of Diffie-Hellman. |
option |
- |
2048 |
||||||||||
|
|
|
|||||||||||||
|
ssl-algorithm |
Relative strength of encryption algorithms accepted in negotiation. |
option |
- |
high |
||||||||||
|
|
|
|||||||||||||